[go: up one dir, main page]

CN106576238A - Method and apparatus for establishing private communication between devices - Google Patents

Method and apparatus for establishing private communication between devices Download PDF

Info

Publication number
CN106576238A
CN106576238A CN201480081440.2A CN201480081440A CN106576238A CN 106576238 A CN106576238 A CN 106576238A CN 201480081440 A CN201480081440 A CN 201480081440A CN 106576238 A CN106576238 A CN 106576238A
Authority
CN
China
Prior art keywords
user
network
predetermined code
external device
communication network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201480081440.2A
Other languages
Chinese (zh)
Inventor
S·霍尔特曼斯
S·凯基
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nokia Technologies Oy
Original Assignee
Nokia Technologies Oy
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nokia Technologies Oy filed Critical Nokia Technologies Oy
Publication of CN106576238A publication Critical patent/CN106576238A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08Access security
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04BTRANSMISSION
    • H04B1/00Details of transmission systems, not covered by a single one of groups H04B3/00 - H04B13/00; Details of transmission systems not characterised by the medium used for transmission
    • H04B1/69Spread spectrum techniques
    • H04B1/707Spread spectrum techniques using direct sequence modulation
    • H04B1/7073Synchronisation aspects
    • H04B1/70735Code identification
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04JMULTIPLEX COMMUNICATION
    • H04J11/00Orthogonal multiplex systems, e.g. using WALSH codes
    • H04J11/0069Cell search, i.e. determining cell identity [cell-ID]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/52User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail for supporting social networking services
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/06Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083Network architectures or network communication protocols for network security for authentication of entities using passwords
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/102Entity profiles
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/02Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03Protecting confidentiality, e.g. by encryption
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/041Key generation or derivation
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/047Key management, e.g. using generic bootstrapping architecture [GBA] without using a trusted network node as an anchor
    • H04W12/0471Key exchange
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06Authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10Integrity
    • H04W12/108Source integrity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/20Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
    • H04W4/21Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel for social networking applications
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W8/00Network data management
    • H04W8/18Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The invention relates to a method and devices for mutual communication between devices, and to computer programs enabling such communication. According to the invention, in a first device is controlled a transmitter module operable in a local radio communications network to transmit a sequence of radio signal pulses representing a predetermined code. In at least one second device a receiver module is scanning said local radio communications network to detect said predetermined code. A contact network of the user of said at least second device is accessed, and the predetermined code is checked in the second device against the user's contact network for a match stored in the network profiles for the contacts. Then a validation key is fetched, that relates to a matching contact found in said contact network, and a connection establishment request containing the validation key is sent over said local radio communications networkfrom the second deviceto the first device. Thus the origin of the connection establishment request is validated in the first device.

Description

用于在设备之间建立私有通信的方法和装置Method and apparatus for establishing private communication between devices

技术领域technical field

本发明涉及用于建立私有通信建立的协议。更具体地,本发明涉及用于利用无线电通信网络和具有所存储的针对个体联系人的网络简档的联系网络在两个设备之间建立和支持私有通信的方法和装置。The present invention relates to a protocol for establishing a private communication setup. More specifically, the present invention relates to methods and apparatus for establishing and supporting private communications between two devices utilizing a radio communication network and a contact network with stored network profiles for individual contacts.

背景技术Background technique

当前的在线约会和社交网络服务是以在线为主导的,并且不容易结合到用户与真实世界的日常交互中。在许多已知的系统中,用户花时间使用智能设备进行广播并通过无数在线社交协议进行筛选,而不是将有价值的时间用于会见朋友、亲戚或商业联系人。Current online dating and social networking services are online-dominated and not easily integrated into users' daily interactions with the real world. In many known systems, users spend time using smart devices to broadcast and sift through myriad online social protocols instead of spending valuable time meeting friends, relatives or business contacts.

在手持设备或其它智能设备的终端用户之间提供联系的问题在技术上涉及的标准化组织是3GPP,其作用于关于在TS23.303(Rel-12)、TR 33.833和TS 33.303中的“基于邻近性的服务(ProSe)”的规范。用于该ProSe发现的3GPP规范基于E-UTRA无线电接口,以及使用绑定到移动网络操作员的核心网络中的全球唯一ProSe应用ID的ProSe应用代码。ProSe服务是移动操作员专注的服务,并仅在不同操作员的用户之间工作,如果该对操作员具有用于该服务的服务联系并都提供技术接口。The problem of providing contact between end users of handheld devices or other smart devices is technically involved in the standardization organization 3GPP, which acts on the "proximity-based Sexual Services (ProSe)". The 3GPP specification for this ProSe discovery is based on the E-UTRA radio interface, and the ProSe application code using a globally unique ProSe application ID bound to the mobile network operator's core network. ProSe services are mobile operator focused services and will only work between users of different operators if the pair of operators has a service connection for the service and both provide the technical interface.

除了计算机病毒等之外,在ProSe通信中识别出的安全威胁至少包括伪造的或重放的消息以及窃听消息的内容,其可能通过软件安装和恶意消息感染设备。In addition to computer viruses and the like, security threats identified in ProSe communications include at least forged or replayed messages and eavesdropping on the content of messages, which may infect devices through software installation and malicious messages.

根据美国专利申请公开号20130276140,已知一种用于利用控制访问技术在社交和商业联系人之间电子帮助交换信息的系统,其中认证的令牌用于控制访问联系人简档中的受保护的信息。使用认证令牌来提供对安全数据和服务提供商系统中的其它资源的相对快速的访问,提供用于待预装载到客户设备的令牌的证书(例如,用户名称和密码)。可以配置数字事务令牌来提供社交或商业联系人或经营场所(例如,事件组织者、俱乐部会所和/或医院)的客户授权的证据,以访问对应的客户简档。According to US Patent Application Publication No. 20130276140, there is known a system for electronically facilitating the exchange of information between social and business contacts using controlled access technology, where an authenticated token is used to control access to protected Information. Authentication tokens are used to provide relatively quick access to secure data and other resources in the service provider system, providing credentials (eg, username and password) for the token to be preloaded into the client device. A digital transaction token may be configured to provide evidence of a social or business contact or customer authorization of a business (eg, an event organizer, clubhouse, and/or hospital) to access a corresponding customer profile.

事务令牌可以嵌入到在简档响应中提供的简档页面代码中。当通过浏览器应用接收并加载简档页面代码时,还通过浏览器加载事务令牌。因此,可以在简档页面的代码中维持事务令牌,而不是进行单独输送。因此,发送方和接收方的无线设备可以在局部无线协议中交换事务令牌,并且无线设备通过第二无线网络耦合到一起。设备可以经由电缆或到PC的其它物理连接或者通过任意形式的无线连接(例如,蓝牙、Wi-Fi或WLAN(802.11))与服务器进行通信,所述无线连接可以直接或通过一些中介(例如,蜂窝网络)转播令牌或其它信息到服务器。剩余的问题仍是需要唯一的标识符(ID),其可以基于移动设备、名称、地址、账单信息(如果可应用)、用户名称、简档信息、照片、偏好和朋友名称。The transaction token can be embedded in the profile page code provided in the profile response. When the profile page code is received and loaded by the browser application, the transaction token is also loaded by the browser. Therefore, the transaction token can be maintained in the code of the profile page instead of being delivered separately. Accordingly, the wireless devices of the sender and receiver can exchange transaction tokens in a local wireless protocol, and the wireless devices are coupled together through the second wireless network. The device may communicate with the server via a cable or other physical connection to the PC, or through any form of wireless connection (e.g., Bluetooth, Wi-Fi, or WLAN (802.11)), either directly or through some intermediary (e.g., cellular network) to relay tokens or other information to the server. The remaining problem remains the need for a unique identifier (ID), which can be based on mobile device, name, address, billing information (if applicable), user name, profile information, photo, preferences, and friend names.

如果两个设备想要通过现有技术中的可用技术开始并进行直接通信,则至少存在下述问题:If two devices want to initiate and communicate directly through techniques available in the prior art, at least the following problems exist:

-广播允许用户跟踪的设备或其它身份信息;-Broadcast device or other identifying information that allows users to track;

-经由网络操作员进行广播,其需要以某种方式进行支持;- broadcast via network operators, which needs to be supported in some way;

-需要来自操作系统的广泛支持;- Requires extensive support from the operating system;

-建立接近度安全协会的全球方法通常可能需要用于用户认证的全球公钥基础设施,其是相当昂贵的。替代地,其可以是基于共享密钥的,但是由于组合的数量,所以可能存在非常、非常多的对称密钥。- A global approach to establishing proximity security associations may generally require a global public key infrastructure for user authentication, which is quite expensive. Alternatively it could be based on a shared key, but due to the number of combinations there could be very, very many symmetric keys.

除了任意的设备ID信息外,提供的识别可以是网络id,如WLAN的SSID身份、蓝牙身份或社交网络认证系统,如Facebook单点登录。In addition to arbitrary device ID information, the identity provided can be a network id, such as a WLAN SSID identity, a Bluetooth identity, or a social network authentication system, such as Facebook single sign-on.

因此,需要全球工作系统来建立安全局部通信,但是同时通过不广播设备身份来保护用户的完整性和位置隐私。这意味着实际上必须找到一种不是围绕地理上局部且竞争的操作员建立的方案。Therefore, a globally working system is needed to establish secure local communications, but at the same time protect user integrity and location privacy by not broadcasting device identities. This means that a solution must actually be found that is not built around geographically localized and competing operators.

发明内容Contents of the invention

本发明集合了待组合使用的简单的无线电接口物理层L1功能、序列代码和联系(例如,社交网络),以便建立保护用户隐私且没有用户可跟踪风险的安全局部通信。本发明的方法提供了一种简单且健壮的方式来向朋友通知可用性并用于发现伙伴,其取决于短程通信和社交网络公共简档信息。The present invention brings together simple radio interface physical layer L1 functions, serial codes and connections (eg social networks) to be used in combination to establish secure local communication that protects user privacy and has no risk of user traceability. The method of the present invention provides a simple and robust way to notify friends of availability and for discovering buddies, depending on short-range communication and social network public profile information.

没有必要涉及移动网络操作员,但是仅要求来自社交网络服务的支持,存在许多所述服务以供选择。这使得本发明的方法与要求设备、身份或通信网络ID的方法相比能够保护隐私。The mobile network operator is not necessarily involved, but only support is required from a social networking service, of which there are many to choose from. This enables the method of the present invention to preserve privacy compared to methods requiring a device, identity or communication network ID.

根据本发明的方法,在第一设备中控制发送器模块,其能够在局部无线电通信网络中操作以发送表示预定代码的无线电信号脉冲序列。According to the method of the invention, in a first device a transmitter module is controlled, which is operable in a local radio communication network to transmit a sequence of radio signal pulses representing a predetermined code.

在至少一个第二设备中,接收器模块扫描所述局部无线电通信网络以检测所述预定代码。访问所述至少第二设备的用户的联系网络,以及在第二设备中相对用户的联系网络检查预定代码,以寻求对于联系人在网络简档中存储的匹配。然后取得验证密钥,该验证密码与在所述联系网络中发现的匹配联系人相关,并从第二设备通过所述局部无线电通信网络将包含验证密钥的连接建立请求发送到第一设备。因此,在所述第一设备中验证所述连接建立请求的起源。In at least one second device, a receiver module scans said local radio communication network to detect said predetermined code. A user's contact network of the at least second device is accessed, and the predetermined code is checked against the user's contact network in the second device for a match stored in the network profile for the contact. An authentication key is then retrieved, the authentication password being associated with a matching contact found in said contact network, and a connection establishment request containing the authentication key is sent from the second device to the first device via said local radio communication network. Accordingly, the origin of the connection establishment request is verified in the first device.

验证密钥可以存储于联系人的简档中,或者可以是特别生成的。密钥可以用于发送密钥标识符到第一设备,或者人们可以在连接建立请求中放置一些参数,从而在第一设备处的接收方可以生成相同的密钥,并验证连接建立请求。The authentication key may be stored in the contact's profile, or may be ad-hoc generated. The key can be used to send the key identifier to the first device, or one can put some parameters in the connection establishment request, so that the receiver at the first device can generate the same key, and verify the connection establishment request.

用于发送和接收表示预定代码的脉冲无线电信号序列的局部无线电通信网络可以与优选通信网络相同或不同,通过所述网络建立直接通信。The local radio communication network used for sending and receiving the sequence of pulsed radio signals representing the predetermined code may be the same as or different from the preferred communication network through which the direct communication is established.

根据一个实施例,预定代码是莫尔斯码。然而,本发明并不以任何方式限制于莫尔斯码。所述代码被优化以用于通过电报线发送英语字符;这种考量在当今世界大部分是过时的,并且其它优先考虑的事件可以建议不同的编码系统。According to one embodiment, the predetermined code is Morse code. However, the present invention is in no way limited to Morse codes. The code was optimized for sending English characters over telegraph wires; such considerations are largely obsolete in today's world, and other priorities may suggest a different encoding system.

以表示预定代码的方式,可以通过在打开和关闭状态之间改变所述发送器模块的输出信号来根据一个实施例生成预定代码,或者可以通过调制所述发送器的输出信号(优选地且简单的通过调幅或调频)来生成预定代码,例如,莫尔斯码是二进制代码。In a manner representing a predetermined code, the predetermined code can be generated according to one embodiment by varying the output signal of the transmitter module between an on and off state, or by modulating the output signal of the transmitter (preferably and simply by AM or FM) to generate predetermined codes, for example, Morse code is a binary code.

所述联系网络可以是用于个人信息存储和分布的集中服务,即,社交媒体网络。适当的社交媒体网络例如是主要的要求是用户可以存储至少在一定程度上对他人可访问的他们自己的简档,并且其可以包括公钥,可以通过该公钥验证用户之间的连接。The contact network may be a centralized service for personal information storage and distribution, ie a social media network. Appropriate social media networks are for example or The main requirement is that users can store their own profile which is at least somewhat accessible to others and which can include a public key by which connections between users can be authenticated.

所使用的局部无线电通信网络可以是以下的一个或多个:蓝牙、WLAN、WiFiDirect或者LTE D2D。其它系统可以存在并在将来变为标准化的。对本发明的目的而言重要的是,直接通信信道是可用的,即,无需操作员或其他权力涉及。The local radio communication network used may be one or more of the following: Bluetooth, WLAN, WiFiDirect or LTE D2D. Other systems may exist and become standardized in the future. What is important for the purposes of the present invention is that a direct communication channel is available, ie no operator or other authority is involved.

根据另一实施例,优选的通信网络可以是互联网或蜂窝网、或蓝牙、WLAN、WiFiDirect或LTE D2D。According to another embodiment, the preferred communication network may be the Internet or a cellular network, or Bluetooth, WLAN, WiFiDirect or LTE D2D.

用户可以提前存储用于他或她的网络联系人的代码,由此可以仅匹配和进一步处理这种存储的代码。此外,所述网络联系人的网络简档可以包含所存储的表示联系人发送他或她的预定代码的时间的信标信息。这将允许监听用户对发送连接建立请求进行定时,例如,如果监听用户想要在发送网络联系一可用就进行连接。A user can store codes for his or her network contacts in advance, whereby only such stored codes can be matched and further processed. In addition, the network profile of the network contact may contain stored beacon information indicating when the contact sent his or her subscription code. This will allow the listening user to time the sending of connection establishment requests, for example, if the listening user wants to connect as soon as the sending network connection becomes available.

一种发明发送装置,其包括:至少一个处理核心;包括计算机程序代码的至少一个存储器;以及在至少一个局部无线电通信网络中可操作的至少一个通信收发器模块。所述处理核心、存储器和计算机程序代码被配置为使得所述装置至少:An inventive sending device comprising: at least one processing core; at least one memory including computer program code; and at least one communication transceiver module operable in at least one local radio communication network. The processing core, memory and computer program code are configured such that the apparatus at least:

控制所述收发器模块中的无线电发送器以通过局部无线电通信网络将表示识别所述装置的用户的预定代码的无线电信号脉冲序列发送至监听外部设备;controlling a radio transmitter in the transceiver module to transmit a sequence of radio signal pulses representing a predetermined code identifying a user of the apparatus to a listening external device via a local radio communication network;

从至少一个监听外部设备通过在所述收发器模块中的接收器接收连接建立请求,该请求包含来自所述监听外部设备的用户的验证密钥,其中所述验证密钥与在所述外部设备的用户的联系网络中的所述装置的用户的用户简档相关,并与所述发送的预定代码匹配;receiving a connection establishment request from at least one listening external device through a receiver in the transceiver module, the request including an authentication key from a user of the listening external device, wherein the authentication key is identical to that in the external device associated with the user profile of the user of the device in the user's contact network and matched with said transmitted predetermined code;

验证所述连接建立请求的起源,并在优选无线电通信网络中向所述至少一个监听外部设备打开直接通信信道。Authenticating the origin of the connection establishment request and opening a direct communication channel to the at least one listening external device in the preferred radio communication network.

一种发明监听装置,其包括:至少一个处理核心;包括计算机程序代码的至少一个存储器;以及在至少一个局部无线电通信网络中可操作的至少一个通信收发器模块。所述处理核心、存储器和计算机程序代码被配置为使得所述装置至少:An inventive listening device comprising: at least one processing core; at least one memory including computer program code; and at least one communication transceiver module operable in at least one local radio communication network. The processing core, memory and computer program code are configured such that the apparatus at least:

通过局部无线电通信网络经由所述通信收发器模块中的接收器扫描表示预定代码的无线电信号脉冲序列;scanning a sequence of radio signal pulses representing a predetermined code via a receiver in said communication transceiver module through a local radio communication network;

从至少一个发送外部设备接收表示识别所述发送外部设备的用户的所述预定代码的无线电信号脉冲序列;receiving from at least one transmitting external device a sequence of radio signal pulses representing said predetermined code identifying a user of said transmitting external device;

匹配在所述接收到的预定代码中编码的所述用户的身份与存储于所述装置内的联系网络的用户简档中的联系人身份;matching said user's identity encoded in said received predetermined code with contact identities stored in a user profile of a contact network within said device;

取得与所述发送外部设备的所述用户相关的验证密钥,并利用所述验证密钥向所述发送外部设备发送连接建立请求;Obtaining an authentication key related to the user of the sending external device, and using the authentication key to send a connection establishment request to the sending external device;

从所述发送外部设备接收对所述连接建立请求的验证,并在优选通信网络中向所述发送外部设备打开直接通信信道。Validation of the connection establishment request is received from the sending external device and a direct communication channel is opened to the sending external device in the preferred communication network.

应注意,表达“发送装置”、“发送外部装置”、“监听外部设备”和“监听装置”是为了清晰目的的概念。所描述的两个设备都可以是具有在所选网络上进行相等双向通信能力的收发器,但是这里概念“发送装置”和“发送外部装置”用于描述用户的发送出他或她的代码以供他人扫描和连接的设备,而概念“监听装置”和“监听外部装置”用于支持扫描这种代码的设备。It should be noted that the expressions "transmitting device", "transmitting external device", "listening external device", and "listening device" are concepts for clarity purposes. Both devices described may be transceivers with equal two-way communication capabilities over the chosen network, but the concepts "sending device" and "sending external device" are used here to describe the user's ability to send out his or her code to Devices for others to scan and connect to, while the concepts "listener" and "listener external device" are used to support devices that scan such codes.

本发明还涉及一种存储有一组计算机可读指令的非瞬态计算机可读介质,当被至少一个处理器执行时,所述指令使得装置至少:The present invention also relates to a non-transitory computer-readable medium storing a set of computer-readable instructions that, when executed by at least one processor, cause an apparatus to at least:

控制无线电发送器通过局部无线电通信网络将表示识别所述装置的用户的预定代码的无线电信号脉冲序列发送至监听外部设备;controlling the radio transmitter to transmit a sequence of radio signal pulses representing a predetermined code identifying the user of the device to a listening external device via the local radio communication network;

从至少一个监听外部设备通过接收器接收连接建立请求,该请求包含来自所述监听外部设备的用户的验证密钥,其中所述验证密钥与在所述监听外部设备的用户的联系网络中的所述装置的用户的用户简档相关,并与所述发送的预定代码匹配;Receiving a connection establishment request from at least one listening external device via a receiver, the request comprising an authentication key from a user of the listening external device, wherein the authentication key is identical to a contact network of the user of the listening external device the user profile of the user of the device is associated and matched with the transmitted predetermined code;

验证所述连接建立请求的起源,并在优选无线电通信网络中向所述至少一个监听外部设备打开直接通信信道。Authenticating the origin of the connection establishment request and opening a direct communication channel to the at least one listening external device in the preferred radio communication network.

最后,本发明还涉及一种存储有一组计算机可读指令的非瞬态计算机可读介质,当被至少一个处理器执行时,所述指令使得装置至少:Finally, the present invention also relates to a non-transitory computer-readable medium storing a set of computer-readable instructions which, when executed by at least one processor, cause an apparatus to at least:

通过局部无线电通信网络经由接收器扫描表示预定代码的无线电信号脉冲序列;Scanning a sequence of radio signal pulses representing a predetermined code via a receiver through a local radio communication network;

从至少一个发送外部设备接收表示识别所述发送外部设备的用户的所述预定代码的无线电信号脉冲序列;receiving from at least one transmitting external device a sequence of radio signal pulses representing said predetermined code identifying a user of said transmitting external device;

匹配在所述接收到的预定代码中编码的用户的身份与存储于所述装置内的联系网络的用户简档中的联系人身份;matching the user's identity encoded in said received predetermined code with contact identities stored in a user profile of a contact network within said device;

取得与所述发送外部设备的所述用户相关的验证密钥,并利用所述验证密钥向所述发送外部设备发送连接建立请求;Obtaining an authentication key related to the user of the sending external device, and using the authentication key to send a connection establishment request to the sending external device;

从所述发送外部设备接收对所述连接建立请求的验证,并在优选通信网络中向所述发送外部设备打开直接通信信道。Validation of the connection establishment request is received from the sending external device and a direct communication channel is opened to the sending external device in the preferred communication network.

本发明涉及非瞬态计算机可读介质的实施例可以是API(应用编程接口)形式的计算机程序,当其由例如移动设备中的处理核心运行时,将支持从应用到短程无线电模块的直接访问,出于本发明的目的使得应用控制局部无线电通信网络的收发器。An embodiment of the invention relating to a non-transitory computer readable medium may be a computer program in the form of an API (Application Programming Interface), which when run by, for example, a processing core in a mobile device, will support direct access from the application to the short range radio module , for the purpose of the present invention enables an application to control a transceiver of a local radio communication network.

工业应用industrial application

本发明在工业上可应用于电信工业,并且还可以容易地在娱乐和游戏工业中找到有用的应用。The present invention is industrially applicable in the telecommunications industry and may also readily find useful application in the entertainment and gaming industries.

附图说明Description of drawings

图1示出了可以在本发明中使用的示例性联系网络服务;Figure 1 shows an exemplary contact web service that can be used in the present invention;

图2示出了用户正在搜索另一用户的通信建立尝试;Figure 2 shows a user searching for another user's communication setup attempt;

图3示出了用户决定想要检查他的任何朋友是否在周围的通信建立尝试;Figure 3 shows a communication setup attempt where a user decides he wants to check if any of his friends are around;

图4示出了能够支持本发明的至少一些实施例的示例性装置。Figure 4 illustrates an example apparatus capable of supporting at least some embodiments of the present invention.

具体实施方式detailed description

参考图1,示出了联系网络服务10的例子。联系网络可以是大部分针对朋友的社交网络,例如facebook等,但是其还可以是企业网络或具有中央数据库的另一闭合用户分组。可以为购物中心或办公园区的顾客创建这种闭合用户分组,其中企业在其社交网络简档中广告其“莫尔斯码”,以供顾客使用它们找到商店(即,室内位置服务)以及可能的供应。在服务10中包含的中央数据库托管用户的联系简档。联系或社交网络的支柱是互联网11,或者能够执行TCP/IP类协议和传输的任意其它计算机互连网络。Referring to Figure 1, an example of a contact web service 10 is shown. The contact network can be mostly a social network for friends, like facebook etc., but it can also be an enterprise network or another closed group of users with a central database. This closed user grouping could be created for customers in a shopping mall or office park, where businesses advertise their "Morse codes" on their social network profiles for customers to use to find stores (i.e., indoor location services) and possibly supply. A central database included in the service 10 hosts the contact profiles of users. The backbone of the connection or social network is the Internet 11, or any other computer interconnected network capable of implementing TCP/IP-like protocols and transports.

联系网络服务10在其数据库中具有订户的列表12,其每一个可以具有OTA(通过无线)发现封装13,其在社交网络环境中支持由他或她的朋友检测该用户,如结合图2描述的。在这里,示例性用户的键是以莫尔斯码编码的User1。在这里用于局域连接的优选无线电通信网络是蓝牙(BT-LE),但是作为备份,在蓝牙在该位置不可用时,还给出了替代的无线电通信网络(Wi-FI)。局部通信链路可以基于Wi-Fi Direct、WLAN、蓝牙或LTE D2D、或者在设备中可用的任意其它适当遥测技术。用户在他或她的简档中做出的技术选择当然取决于所使用的设备、环境的基础设施以及用户的偏好。The contact network service 10 has in its database a list 12 of subscribers, each of which may have an OTA (over the air) discovery package 13, which supports detection of the user by his or her friends in a social networking environment, as described in connection with FIG. 2 of. Here, the key for an exemplary user is User1 encoded in Morse code. The preferred radio communication network for local area connection here is Bluetooth (BT-LE), but as a backup, an alternative radio communication network (Wi-FI) is also given when Bluetooth is not available at the location. The local communication link may be based on Wi-Fi Direct, WLAN, Bluetooth or LTE D2D, or any other suitable telemetry technology available in the device. The technical choices a user makes in his or her profile will of course depend on the device used, the infrastructure of the environment, and the user's preferences.

其它信息可以包括用户User1宣布他或她针对OTA联系尝试的可用性的时间。出于节约能量的目的,这可以以信标周期组织。信标可以使用一天中的时间作为所有用户的共同参考,并且定义主动信标工作周期的重复开始时间和周期的持续时间。通过这种信息交换(例如,在各方之间较早的通信期间),发现设备提前知道何时联系User1,并且可以针对User1将发现参数设置为最优化的功率和时间。Other information may include the time at which User Userl announced his or her availability for an OTA contact attempt. This can be organized in beacon periods for energy saving purposes. Beacons can use the time of day as a common reference for all users, and define the repeating start time and duration of the active beacon duty cycle. Through this exchange of information (eg, during an earlier communication between the parties), the discovery device knows in advance when to contact User1 and can set the discovery parameters to optimal power and time for User1.

将OTA封装添加到社交网络简档,以使得服务支持无线发现。简档信息可以包括用户的当前发现状态,即,用户是可发现的或是不可发现的。取决于用户的配置和偏好,可以存在其它状态。例如,如果用户具有不同分组的朋友或者属于不同通信,则状态可以指的是用户仅可以由特定分组发现的有限发现。每当用户打开或关闭其局部链路信标时,在设备中运行的应用可以被配置为相应地在简档中更新发现状态。另外,在OTA发现封装13中公开的信息的量和细节可以在分组之间变化,并且全部细节可以仅针对朋友可用。这取决于在联系或社交网络中可用的设置。OTA packaging is added to social networking profiles to enable wireless discovery of services. Profile information may include the user's current discovery status, ie, whether the user is discoverable or not. Other states may exist depending on the user's configuration and preferences. For example, if a user has friends of different groups or belongs to a different communication, the status may refer to limited discovery that the user can only be discovered by a specific group. Whenever the user turns their local link beacons on or off, an application running in the device can be configured to update the discovery status in the profile accordingly. Additionally, the amount and detail of information disclosed in the OTA discovery package 13 may vary between groups, and full details may only be available to friends. It depends on the settings available in Contacts or Social Networks.

现在参见图2,其中通过简化工作流描述了本发明的通信建立尝试。在20处,监听User2想要检查他/她的朋友User1是否可进行聊天。在21处,User2触发在他移动设备中的他的社交网络服务应用(app),以取得User1的OTA发现封装13。在用户简档中与他的发现相关的信息被称作发现封装。在22处,app激活移动设备的BT-LE模块来搜索发送User1的莫尔斯码的信标。如果User1正在发送,则在25处发现他或她。如果在23处User1没有发送或不在优选的无线电通信网络范围内,则没有发现User1。如果User1在此时减少联系,则他或她在24处也不能被发现。Referring now to FIG. 2, the communication setup attempt of the present invention is depicted through a simplified workflow. At 20, the listening User2 wants to check if his/her friend User1 is available for chatting. At 21, User2 triggers his social networking service application (app) in his mobile device to fetch Userl's OTA discovery package 13 . The information in a user profile related to his discoveries is called a discovery package. At 22, the app activates the mobile device's BT-LE module to search for a beacon sending User1's Morse code. If User1 is sending, he or she is found at 25. If at 23 User1 is not transmitting or is not within range of the preferred radio communication network, then User1 is not found. If User1 reduces contact at this time, he or she cannot be found at 24 either.

更详细地,监听User2利用他的设备通过一个(或多个)无线电通信网络扫描莫尔斯签名。User2相对他的社交网络记录检查接收到的莫尔斯签名,为此他登录到他的社交网络上。User2发现他的一个朋友(User1)使用例如莫尔斯姓名XYZ,并且从他的社交网络(例如,facebook)取得User1的公钥。User2然后将连接建立请求发送给User1,该请求使用User1的公钥进行签名。User1随后可以使用他的私钥验证该连接建立请求。为了避免中间人攻击,User1还可以用他的朋友User2的公钥验证User2的答案。In more detail, the listening User2 uses his device to scan for Morse signatures over one (or more) radio communication networks. User2 checks the received Morse signature against his social network records, for which he is logged on to his social network. User2 finds out that one of his friends (User1) uses eg Morse name XYZ, and gets User1's public key from his social network (eg facebook). User2 then sends a connection establishment request to User1, which is signed with User1's public key. User1 can then use his private key to authenticate the connection establishment request. To avoid man-in-the-middle attacks, User1 can also verify User2's answer with his friend User2's public key.

加密密钥可以如上所述用于保护两个设备之间的通信链路。替代地,其还可以仅用于初始第一认证,然后设备可以直接例如通过Diffie-Hellmann密钥交换协议或其它类似方式交换安全密钥。Encryption keys can be used as described above to secure the communication link between the two devices. Alternatively, it may also be used only for an initial first authentication, and then the devices may directly exchange security keys, eg via the Diffie-Hellmann key exchange protocol or other similar means.

任意用户可以将莫尔斯码广告给他的朋友或所选朋友分组,并且所述朋友随后具有直接可用的代码。代码可以是临时的并在设置时间自动到期,例如,以便避免用户遭受跟踪和/或社交网络账户遭受恶意攻击。在社交网络中需要更新新的临时莫尔斯码,并且朋友随后可以取得。用户还可以在他的设备的存储器中缓存他的朋友的莫尔斯码,包括任意代码到期信息,以避免频繁的网络设置来检查已经发现的代码。由此仅需要检查新的或更新的代码。Any user can advertise the Morse code to his friends or selected groups of friends, and said friends then have the codes immediately available. The code may be temporary and automatically expire at a set time, for example, to protect the user from stalking and/or malicious attacks on social networking accounts. The new temporary Morse code needs to be updated in the social network and can then be picked up by friends. The user can also cache his friend's Morse codes in his device's memory, including arbitrary code expiration information, to avoid frequent network setups to check already discovered codes. Thus only new or updated codes need to be checked.

在另一实施例中,User2可以首先检查代码,并且然后使得他的设备的局部连接接收器仅用于发现所选代码。通过该方法,忽略检测到的莫尔斯码而不是在存储器中缓存的那些。实际上,这可以通过提前在设备的存储器中存储多个联系人的代码而实现,由此仅检查存储的代码用于相对User2的个人网络联系人进行匹配。In another embodiment, User2 may first check the code, and then have his device's local connection receiver only used to find the selected code. With this approach, detected Morse codes are ignored instead of those cached in memory. In practice, this can be achieved by storing the codes of several contacts in the device's memory in advance, whereby only the stored codes are checked for matching against User2's personal network contacts.

现在参考图3,解释了从User1的观点的相反情形,其中发送User1在30处决定检查是否有他的任意朋友在周围。在31处,他在他的设备中运行服务应用(app),其激活设备的BT-LE模块来发送他的莫尔斯码XYZ。监听User2在附近,并在32处通过发送用User1的公钥签名且用其验证的连接请求进行响应。User1现在可以选择验证代码并与识别出的User2采取任何动作33、34,或者在35处不用他的私钥验证公钥,因为他不知道User2。Referring now to FIG. 3 , the opposite situation from User1's point of view is explained, where the sending User1 decides at 30 to check if any of his friends are around. At 31 he runs a service application (app) in his device which activates the device's BT-LE module to send his Morse code XYZ. Listens for User2's proximity and responds at 32 by sending a connection request signed and authenticated with Userl's public key. User1 can now choose to verify the code and take any action 33, 34 with the identified User2, or at 35 not verify the public key with his private key since he does not know User2.

图4示出了能够支持本发明的至少一些实施例的示例性装置。示出了设备40,其例如可以包括移动通信设备,如智能电话。设备40中包括处理器41,其例如可以包括单核或多核处理器,其中单核处理器包括一个处理核心,而多核处理器包括多于一个处理核心。例如,处理器41可以包括Qualcomm Snapdragon 800处理器。处理器41可以包括多于一个处理器。处理核心可以例如包括由Intel公司制造的Cortex-A8处理核心或者由Advanced MicroDevices公司生产的Brisbane处理核心。处理器41可以包括至少一个专用集成电路ASIC。处理器41可以包括至少一个现场可编程门阵列FPGA。处理器41可以是用于在设备40中执行方法步骤的器件。处理器41可以是用于在设备40中执行方法步骤的器件。处理器41可以至少部分地由计算机指令配置以执行动作。Figure 4 illustrates an example apparatus capable of supporting at least some embodiments of the present invention. A device 40 is shown, which may comprise, for example, a mobile communication device such as a smartphone. Included in device 40 is a processor 41 , which may include, for example, a single-core processor including one processing core or a multi-core processor including more than one processing core. For example, processor 41 may include a Qualcomm Snapdragon 800 processor. Processor 41 may include more than one processor. The processing core may include, for example, a Cortex-A8 processing core manufactured by Intel Corporation or a Brisbane processing core manufactured by Advanced MicroDevices Corporation. Processor 41 may include at least one application specific integrated circuit ASIC. Processor 41 may include at least one Field Programmable Gate Array FPGA. Processor 41 may be means for performing method steps in device 40 . Processor 41 may be means for performing method steps in device 40 . Processor 41 may be configured at least in part by computer instructions to perform actions.

设备40可以包括单独的存储器单元42,其可以包括随机存取存储器和/或永久存储器。存储器42可以包括至少一个RAM芯片。存储器42例如可以包括磁、光和/或全息存储器。存储器42至少部分对处理器41可访问,并且可以至少部分是处理器41被配置为执行的计算机指令的存储。当被配置为使得处理器41执行特定动作的计算机指令存储于存储器42中,并且设备40整体被配置为利用来自存储器42的计算机指令在处理器41的引导下运行时,处理器41和/或其至少一个处理核心可以被认为被配置为执行所述特定动作。Device 40 may include a separate memory unit 42, which may include random access memory and/or persistent memory. Memory 42 may include at least one RAM chip. Memory 42 may comprise, for example, magnetic, optical and/or holographic memory. Memory 42 is at least partially accessible to processor 41 and may be at least in part storage of computer instructions that processor 41 is configured to execute. When computer instructions configured to cause the processor 41 to perform specific actions are stored in the memory 42, and the device 40 as a whole is configured to run under the guidance of the processor 41 using the computer instructions from the memory 42, the processor 41 and/or At least one processing core thereof may be considered configured to perform said particular action.

设备40具有收发器单元46,其包括发送器43和接收器44。发送器43和接收器44被配置为根据至少一个蜂窝或非蜂窝标准分别发送和接收信息。发送器43可以包括多于一个发送器。接收器44可以包括多于一个接收器。发送器43和/或接收器44可以被配置为例如根据移动通信全球系统GSM、宽带码分多址WCDMA、长期演进LTE、IS-95、无线局域网WLAN、以太网和/或微波接入全球互通WiMAX标准进行操作。The device 40 has a transceiver unit 46 comprising a transmitter 43 and a receiver 44 . Transmitter 43 and receiver 44 are configured to transmit and receive information, respectively, according to at least one cellular or non-cellular standard. Transmitter 43 may include more than one transmitter. Receiver 44 may include more than one receiver. The transmitter 43 and/or the receiver 44 may be configured, for example, according to Global System for Mobile Communications GSM, Wideband Code Division Multiple Access WCDMA, Long Term Evolution LTE, IS-95, Wireless Local Area Network WLAN, Ethernet and/or Global Interoperability for Microwave Access WiMAX standard to operate.

设备40还包括短距离无线电通信收发器45。收发器45支持至少一个这种技术,例如,蓝牙、WLAN、Wi-Fi Direct、LTE D2D、Wibee或类似技术。The device 40 also includes a short-range radio communication transceiver 45 . The transceiver 45 supports at least one such technology, eg Bluetooth, WLAN, Wi-Fi Direct, LTE D2D, Wibee or similar.

设备40通常包括用户接口(未示出)。用户接口(UI)可以包括以下中的至少一个:显示器、键盘、触摸屏、被布置为通过使得设备40震动以用信号通知用户的振动器、扬声器和麦克风。用户能够经由UI操作设备40,例如,以接收进入的电话呼叫、引起电话呼叫或视频呼叫、浏览互联网、管理存储于存储器42内或云上的经由发送器43和接收器44或者经由NFC收发机45可访问的数字文件、和/或玩游戏。Device 40 typically includes a user interface (not shown). The user interface (UI) may comprise at least one of: a display, a keyboard, a touch screen, a vibrator arranged to signal the user by causing the device 40 to vibrate, a speaker and a microphone. The user is able to operate the device 40 via the UI, for example, to receive an incoming phone call, make a phone call or video call, browse the Internet, manage data stored in the memory 42 or on the cloud via the transmitter 43 and receiver 44 or via an NFC transceiver 45 to access digital files, and/or play games.

设备40还可以被布置为接受用户身份模块(未示出),例如可安装在设备40内的订户身份模块(SIM)卡。设备40可以包括图4中未示出的其它设备,例如至少一个数字摄像机。The device 40 may also be arranged to accept a Subscriber Identity Module (not shown), such as a Subscriber Identity Module (SIM) card installable within the device 40 . Device 40 may include other devices not shown in FIG. 4, such as at least one digital video camera.

处理器41可以装备有发送器,其被布置为从处理器41经由设备40内部的电导线向包含于设备40的其它设备输出信息。这种发送器可以包括串行总线发送器,其例如被布置为经由至少一个电导线向存储器42输出信息以供存储于其中。代替串行总线,发送器可以包括并行总线发送器。类似地,处理器41可以包括被布置为经由设备40内的电导线从包含于设备40内的其它设备接收处理器41内的信息的接收器。这种接收器可以包括串行总线接收器,其例如被布置为经由至少一个电导线从接收器44接收信息以供在处理器41中处理。代替串行总线,接收器可以包括并行总线接收器。The processor 41 may be equipped with a transmitter arranged to output information from the processor 41 to other devices comprised in the device 40 via electrical leads inside the device 40 . Such a transmitter may comprise a serial bus transmitter arranged, for example, to output information via at least one electrical lead to the memory 42 for storage therein. Instead of a serial bus, the transmitter may include a parallel bus transmitter. Similarly, processor 41 may comprise a receiver arranged to receive information within processor 41 from other devices contained within device 40 via electrical leads within device 40 . Such a receiver may comprise a serial bus receiver arranged, for example, to receive information from a receiver 44 via at least one electrical lead for processing in the processor 41 . Instead of a serial bus, the receiver may include a parallel bus receiver.

处理器41、存储器42、发送器43、接收器44、收发器45和/或任意其它模块或设备可以通过设备40内部的电导线以多种不同方式互连。例如,每个上述设备可以单独连接到设备40内的主总线,以允许设备交换信息。然而,如本领域技术人员理解的,这只是一个例子并且取决于实施例,可以选择互连至少两个上述设备的各种方式,而不背离本发明的范围。Processor 41 , memory 42 , transmitter 43 , receiver 44 , transceiver 45 , and/or any other module or device may be interconnected by electrical wires inside device 40 in a number of different ways. For example, each of the aforementioned devices may be individually connected to a main bus within device 40 to allow the devices to exchange information. However, as understood by those skilled in the art, this is only an example and depending on the embodiment, various ways of interconnecting at least two of the above devices may be chosen without departing from the scope of the present invention.

首先,用户需要向图4的通信设备40中安装应用层软件应用47(app)。App 47自然在物理上驻留在存储器单元42内,并且在处理器41内运行,但是为了清晰起见在图4中进行描绘。App 47(其可以是API形式的计算机程序)有权例如通过将其发送L1载波的发送器打开或关闭来控制设备的局部无线电通信收发器模块45。当用户想要被他的朋友发现时,局部无线电通信收发器模块45的至少发送器部分需要终止所有其它任务,之后app 47开始根据预定序列模式将发送器打开或关闭。在莫尔斯码的情况下面,代码“user1”的序列可以如下:First, the user needs to install an application layer software application 47 (app) into the communication device 40 of FIG. 4 . App 47, of course, physically resides within memory unit 42 and runs within processor 41, but is depicted in Figure 4 for clarity. The App 47 , which may be a computer program in the form of an API, has the authority to control the local radio communication transceiver module 45 of the device, for example by switching its transmitter transmitting the L1 carrier on or off. When the user wants to be discovered by his friends, at least the transmitter part of the local radio communication transceiver module 45 needs to terminate all other tasks, after which the app 47 starts switching the transmitter on or off according to a predetermined sequence pattern. In the case of Morse code, the sequence of code "user1" could be as follows:

短关闭-打开-短关闭-打开-长关闭/短关闭-打开—短关闭-打开-短关闭/短关闭/短关闭-打开-长关闭-打开-短关闭/短关闭-打开-长关闭-打开-长关闭-打开-长关闭-打开-长关闭/。Short Close-Open-Short Close-Open-Long Close/Short Close-Open-Short Close-Open-Short Close/Short Close/Short Close-Open-Long Close-Open-Short Close/Short Close-Open-Long Close- Open-Long Close-Open-Long Close-Open-Long Close/.

在该序列中,短关闭=点、长关闭=破折号、打开=分隔符。在字母之间需要不同的分隔符,这里上述斜线“/”可以被“长打开”或“非常长关闭”替代。In this sequence, short close=dot, long close=dash, open=separator. A different separator is required between letters, here the above slash "/" can be replaced by "long open" or "very long close".

这里L1表示局部无线电通信网络的物理层被使用;所有的网络技术和协议具有其自己的标准化层,并且不在本发明的范围内从而以任意细节呈现这些。例如,开放式系统互连模型(OSI)通过将其分割为抽象层来特征化并标准化通信系统的内部功能。模型是国际标准化组织(ISO)的开放式系统互连项目的产品,由识别ISO/IEC 7498-1维持。Here L1 means that the physical layer of the local radio communication network is used; all network technologies and protocols have their own standardized layers and it is not within the scope of the present invention to present these in arbitrary detail. For example, the Open Systems Interconnection model (OSI) characterizes and standardizes the internal functionality of a communication system by partitioning it into abstraction layers. The model is a product of the Open Systems Interconnection project of the International Organization for Standardization (ISO), maintained by the recognition ISO/IEC 7498-1.

使用根据本发明的设备的软件应用需要访问所使用网络的物理层L1,但是本领域技术人员能够设计可以操纵网络协议的各层的软件,以便使其服务正在讨论的SW应用的目的。A software application using a device according to the invention needs access to the physical layer L1 of the network used, but a person skilled in the art is able to design software that can manipulate the layers of the network protocol so that it serves the purpose of the SW application in question.

显然,在本发明的范围中,能够使用其它变型来编码这种物理层L1通信,例如,其中“关闭”是分隔符标记,并且“打开”序列的长度对应于点或破折号。另外,除了莫尔斯码之外的其它序列代码可能同样有用,因为实际上设备的用户可能不需要知道他自己使用何种代码。用户可能仅需要键入期望的字母数字代码名称,其随后将被转换成莫尔斯或一些其它代码。Obviously, within the scope of the invention, other variants can be used to encode such physical layer L1 communication, for example, where "close" is a delimiter mark and the length of the "open" sequence corresponds to a dot or a dash. In addition, other serial codes than Morse code may be equally useful, since in fact the user of the device may not need to know which code he himself uses. The user may only need to key in the desired alphanumeric code name, which will then be converted to Morse or some other code.

在另一更先进的实施例中,莫尔斯码或一些其它类型的顺序代码可以用于将L1载体调制为简单的PCM代码,其中点、破折号和分隔符将具有其自己的代码字。这可能比打开和关闭载波更具能效,但是在另一方面,这可能需要移动设备内更先进的内层通信。In another more advanced embodiment, Morse code or some other type of sequential code could be used to modulate the L1 carrier into a simple PCM code, where dots, dashes and separators would have their own codewords. This may be more power efficient than switching the carrier on and off, but on the other hand, may require more advanced inner layer communication within the mobile device.

可以理解的是,所公开的本发明的实施例不限于特定系统、过程步骤或本文公开的部件,而是延伸到相关领域普通技术人员可认识到的其等价物。还可以理解的是,本文所使用的术语仅用于描述特定实施例的目的,而不意图进行限制。It is to be understood that the disclosed embodiments of the invention are not limited to the particular systems, process steps, or components disclosed herein, but extend to equivalents thereof as would be recognized by one of ordinary skill in the relevant art. It is also to be understood that terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting.

在该说明书中贯穿提及的“一个实施例”或“实施例”表示结合实施例描述的特定特征、结构或特性包含于本发明的至少一个实施例中。因此,在本说明书中各处出现的短语“在一个实施例中”或“在实施例中”不必都指代同一实施例。Reference throughout this specification to "one embodiment" or "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, appearances of the phrases "in one embodiment" or "in an embodiment" in various places in this specification are not necessarily all referring to the same embodiment.

如本文使用的,多个项目、结构元件、部件和/或系统为了方便可以存在于共同列表中。然而,这些列表应该被解释为好像列表的每个成员被分别识别为单独的且唯一的成员。因此,仅基于它们存在于共同分组中而不表示相反,这种列表的单个成员不应被解释为实际上同一列表的任意其它成员的等价物。另外,本发明的各种实施例和例子可以在本文中连同其各种部件的替代而被参考。可以理解的是,实际上这种实施例、例子和替代不被解释为彼此的等价物,而是被认为是本发明的单独且自主的表示。As used herein, multiple items, structural elements, components and/or systems may be present in a common listing for convenience. However, these lists should be construed as if each member of the list were individually identified as a separate and unique member. Thus, no individual member of such list should be construed as an equivalent of virtually any other member of the same list solely on the basis of their presence in a common grouping and not to the contrary. In addition, various embodiments and examples of the present invention may be referred to herein along with substitutions for various components thereof. It is understood that in practice such embodiments, examples and substitutions are not to be construed as equivalents to each other, but are considered as separate and independent representations of the invention.

此外,在一个或多个实施例中,可以以任意适当的方式组合所描述的特征、结构或特性。在后续描述中,提供多个具体细节来提供对本发明实施例的透彻理解。然而,相关领域的技术人员可以认识到可以在没有一个或多个具体细节的情况下实践本发明,或者通过其它方法、部件、系统等实践本发明。在其它实例中,未详细示出或描述已知的结构或操作以避免模糊本发明的各方面。Furthermore, the described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. In the ensuing description, numerous specific details are provided to provide a thorough understanding of embodiments of the invention. One skilled in the relevant art will recognize, however, that the invention may be practiced without one or more of the specific details, or with other methods, components, systems, or the like. In other instances, well-known structures or operations have not been shown or described in detail to avoid obscuring aspects of the invention.

虽然在一个或多个特定应用中示出了本发明原理的前述例子,但是本领域技术人员可以理解的是,可以进行实现方式的形式、使用和细节的多种改变,而不运用创造性的能力,并且不背离本发明的原理和概念。因此,除了下文阐述的权利要求外,并不意图限制本发明。While the foregoing examples have shown the principles of the invention in one or more particular applications, it will be understood by those skilled in the art that various changes in form, use and details of implementation may be made without exercising the inventive capacity , and without departing from the principles and concepts of the present invention. Accordingly, it is not intended that the invention be limited, except by the claims set forth hereinafter.

Claims (30)

1.一种在设备之间进行通信的方法,包括如下步骤:1. A method for communicating between devices, comprising the steps of: 在第一设备中控制发送器模块,所述发送器模块能够在局部无线电通信网络中操作以发送表示预定代码的无线电信号脉冲序列;controlling in the first device a transmitter module operable in the local radio communication network to transmit a sequence of radio signal pulses representing a predetermined code; 在至少一个第二设备中通过接收器模块扫描所述局部无线电通信网络以检测所述预定代码;scanning said local radio communication network to detect said predetermined code by means of a receiver module in at least one second device; 通过所述至少一个第二设备访问所述至少第二设备的用户的联系网络;accessing, through the at least one second device, a contact network of a user of the at least second device; 在所述至少一个第二设备中相对用户的联系网络检查所述预定代码,以寻求对于联系人在网络简档中存储的匹配;checking said predetermined code against a network of contacts of the user in said at least one second device for a match stored in a network profile for the contact; 至少取得与在所述联系网络中发现的匹配联系人相关的验证密钥;obtaining at least an authentication key associated with a matching contact found in said network of contacts; 至少使用所述验证密钥通过所述局部无线电通信网络将连接建立请求从所述至少一个第二设备发送到所述第一设备;sending a connection establishment request from said at least one second device to said first device over said local radio communication network using at least said authentication key; 在所述第一设备中验证所述连接建立请求的起源。The origin of the connection establishment request is authenticated in the first device. 2.根据权利要求1所述的方法,其中对所述连接建立请求的验证打开在优选通信网络中的在所述第一和第二设备之间的直接通信信道。2. The method of claim 1, wherein verification of the connection establishment request opens a direct communication channel between the first and second devices in a preferred communication network. 3.根据权利要求1或2所述的方法,其中所述联系网络是用于个人信息存储和分布的集中服务。3. A method according to claim 1 or 2, wherein the network of contacts is a centralized service for storage and distribution of personal information. 4.根据权利要求1、2或3所述的方法,其中所述局部无线电通信网络选自以下的一个或多个:蓝牙、WLAN、WiFi Direct或者LTE D2D。4. A method according to claim 1 , 2 or 3, wherein the local radio communication network is selected from one or more of: Bluetooth, WLAN, WiFi Direct or LTE D2D. 5.根据权利要求1-4中任一项所述的方法,其中所述优选通信网络是互联网。5. The method of any one of claims 1-4, wherein the preferred communication network is the Internet. 6.根据权利要求1-4中任一项所述的方法,其中所述优选通信网络是蜂窝网络。6. The method of any of claims 1-4, wherein the preferred communication network is a cellular network. 7.根据权利要求1-4中任一项所述的方法,其中所述优选通信网络是以下之一:蓝牙、WLAN、WiFi Direct或者LTE D2D。7. The method according to any one of claims 1-4, wherein the preferred communication network is one of: Bluetooth, WLAN, WiFi Direct or LTE D2D. 8.根据权利要求1-7中任一项所述的方法,其中用于多个联系人的预定代码提前存储于所述第二设备中,由此仅检查存储的代码以在所述第二设备中进行匹配。8. The method according to any one of claims 1-7, wherein predetermined codes for a plurality of contacts are stored in the second device in advance, whereby only the stored codes are checked for use in the second device. match in the device. 9.根据权利要求1-8中任一项所述的方法,其中在所述网络联系人的网络简档中存储联系人发送表示用户的预定代码的所述脉冲序列的时间作为信标信息,所述信标信息存储于所述第二设备中用于对发送所述连接建立请求定时。9. The method according to any one of claims 1-8, wherein the time at which the contact sent the sequence of pulses representing the predetermined code of the user is stored as beacon information in the network profile of the network contact, The beacon information is stored in the second device for timing sending of the connection establishment request. 10.根据权利要求1-9中任一项所述的方法,其中通过在打开和关闭状态之间改变所述发送器模块的表示预定代码的输出信号来生成表示所述预定代码的所述无线电信号脉冲序列。10. A method according to any one of claims 1-9, wherein said radio representing said predetermined code is generated by varying an output signal of said transmitter module representing said predetermined code between an on and off state. signal pulse sequence. 11.根据权利要求1-9中任一项所述的方法,其中通过按照预定代码的要求调制所述发送器的输出信号以在状态之间交替,来生成表示所述预定代码的所述无线电信号脉冲序列。11. A method according to any one of claims 1-9, wherein said radio representing said predetermined code is generated by modulating an output signal of said transmitter to alternate between states as required by said predetermined code. signal pulse sequence. 12.根据权利要求11所述的方法,其中无线电信号脉冲序列被调幅。12. The method of claim 11, wherein the radio signal pulse train is amplitude modulated. 13.根据权利要求11所述的方法,其中无线电信号脉冲序列被调频。13. The method of claim 11, wherein the radio signal pulse train is frequency modulated. 14.根据权利要求1-13中任一项所述的方法,其中无线电信号脉冲序列包括莫尔斯码序列。14. A method according to any one of claims 1-13, wherein the radio signal pulse sequence comprises a Morse code sequence. 15.一种装置,其包括:至少一个处理核心;包括计算机程序代码的至少一个存储器;以及能够在至少一个局部无线电通信网络中操作的至少一个通信收发器模块;所述至少一个存储器和计算机程序代码被配置为通过至少一个处理核心,使得所述装置至少:15. An apparatus comprising: at least one processing core; at least one memory comprising computer program code; and at least one communication transceiver module capable of operating in at least one local radio communication network; said at least one memory and computer program Code configured to run through at least one processing core such that the means at least: 控制所述收发器模块中的无线电发送器,以通过局部无线电通信网络将表示识别所述装置的用户的预定代码的无线电信号脉冲序列发送至监听外部设备;controlling a radio transmitter in said transceiver module to transmit a sequence of radio signal pulses representing a predetermined code identifying a user of said apparatus to a listening external device via a local radio communications network; 从至少一个监听外部设备通过在所述收发器模块中的接收器接收连接建立请求,该连接建立请求包含来自所述监听外部设备的用户的验证密钥,其中所述验证密钥与在所述外部设备的用户的联系网络中的所述装置的用户的用户简档相关,并与所述发送的预定代码匹配;Receive a connection establishment request from at least one listening external device through a receiver in the transceiver module, the connection establishment request including an authentication key from a user of the listening external device, wherein the authentication key is the same as in the the user profile of the user of said device in the contact network of the user of the external device is correlated and matched with said transmitted predetermined code; 验证所述连接建立请求的起源,并在优选无线电通信网络中向所述至少一个监听外部设备打开直接通信信道。Authenticating the origin of the connection establishment request and opening a direct communication channel to the at least one listening external device in the preferred radio communication network. 16.一种装置,其包括:至少一个处理核心;包括计算机程序代码的至少一个存储器;以及能够在至少一个局部无线电通信网络中操作的至少一个通信收发器模块;所述至少一个存储器和计算机程序代码被配置为通过至少一个处理核心,使得所述装置至少:16. An apparatus comprising: at least one processing core; at least one memory comprising computer program code; and at least one communication transceiver module capable of operating in at least one local radio communication network; said at least one memory and computer program Code configured to run through at least one processing core such that the means at least: 通过局部无线电通信网络经由在所述通信收发器模块中的接收器扫描表示预定代码的无线电信号脉冲序列;scanning a sequence of radio signal pulses representing a predetermined code through a local radio communication network via a receiver in said communication transceiver module; 从至少一个发送外部设备接收表示识别所述发送外部设备的用户的所述预定代码的无线电信号脉冲序列;receiving from at least one transmitting external device a sequence of radio signal pulses representing said predetermined code identifying a user of said transmitting external device; 匹配在所述接收到的预定代码中编码的所述用户的身份与在所述装置中存储的在联系网络的用户简档中的联系人身份;matching said user's identity encoded in said received predetermined code with contact identities stored in said device in a user profile of a contact network; 取得与所述发送外部设备的所述用户相关的验证密钥,并利用所述验证密钥向所述发送外部设备发送连接建立请求;Obtaining an authentication key related to the user of the sending external device, and using the authentication key to send a connection establishment request to the sending external device; 从所述发送外部设备接收对所述连接建立请求的验证,并在优选通信网络中向所述发送外部设备打开直接通信信道。Validation of the connection establishment request is received from the sending external device and a direct communication channel is opened to the sending external device in the preferred communication network. 17.根据权利要求15或16所述的装置,其中,表示预定代码的所述无线电信号脉冲序列是莫尔斯代码。17. Apparatus according to claim 15 or 16, wherein the sequence of radio signal pulses representing a predetermined code is a Morse code. 18.根据权利要求15-17中任一项所述的装置,其中所述联系网络是用于个人信息存储和分布的集中服务。18. The apparatus of any one of claims 15-17, wherein the contact network is a centralized service for storage and distribution of personal information. 19.根据权利要求15-18中任一项所述的装置,其中所述局部无线电通信网络选自以下中的一个或多个:蓝牙、WLAN、WiFi Direct或LTE D2D。19. The apparatus according to any one of claims 15-18, wherein the local radio communication network is selected from one or more of: Bluetooth, WLAN, WiFi Direct or LTE D2D. 20.根据权利要求15-19中任一项所述的装置,其中所述优选通信网络是互联网。20. The apparatus according to any one of claims 15-19, wherein the preferred communication network is the Internet. 21.根据权利要求15-19中任一项所述的装置,其中所述优选通信网络是蜂窝网络。21. The apparatus according to any one of claims 15-19, wherein the preferred communication network is a cellular network. 22.根据权利要求15-19中任一项所述的装置,其中所述优选通信网络是以下之一:蓝牙、WLAN、WiFi Direct或LTE D2D。22. The apparatus according to any of claims 15-19, wherein the preferred communication network is one of: Bluetooth, WLAN, WiFi Direct or LTE D2D. 23.根据权利要求15所述的装置,其中通过在打开和关闭状态之间改变所述发送器的输出信号来生成表示预定代码的所述无线电信号脉冲序列。23. The apparatus of claim 15, wherein the sequence of radio signal pulses representing a predetermined code is generated by varying an output signal of the transmitter between on and off states. 24.根据权利要求15所述的装置,其中通过按照预定代码的要求调制所述发送器的输出信号以在状态之间交替,来生成表示所述预定代码的所述无线电信号脉冲序列。24. The apparatus of claim 15, wherein the sequence of radio signal pulses representing a predetermined code is generated by modulating an output signal of the transmitter to alternate between states as required by the predetermined code. 25.根据权利要求24所述的装置,其中无线电信号脉冲序列被调幅。25. The apparatus of claim 24, wherein the radio signal pulse train is amplitude modulated. 26.根据权利要求24所述的装置,其中无线电信号脉冲序列被调频。26. The apparatus of claim 24, wherein the radio signal pulse train is frequency modulated. 27.根据权利要求16-22中任一项所述的装置,其中提前在所述至少一个存储器中存储用于所述联系人的表示预定代码的所述无线电信号脉冲序列,以限制代码仅与存储的代码匹配。27. The device according to any one of claims 16-22, wherein said sequence of radio signal pulses representing a predetermined code for said contact is stored in said at least one memory in advance, so as to limit the code to Stored codes match. 28.一种用于在根据权利要求15-27所述的装置中执行根据权利要1-14所述的方法的计算机程序。28. A computer program for performing the method according to claims 1-14 in an apparatus according to claims 15-27. 29.一种存储有一组计算机可读指令的非瞬态计算机可读介质,当被至少一个处理器执行时,所述指令使得装置至少:29. A non-transitory computer readable medium storing a set of computer readable instructions that, when executed by at least one processor, cause an apparatus to at least: 控制无线电发送器通过局部无线电通信网络将表示识别所述装置的用户的预定代码的无线电信号脉冲序列发送至监听外部设备;controlling the radio transmitter to transmit a sequence of radio signal pulses representing a predetermined code identifying the user of said device to a listening external device via the local radio communication network; 从至少一个监听外部设备通过接收器接收连接建立请求,该连接建立请求包含来自所述监听外部设备的用户的验证密钥,其中所述验证密钥与在所述监听外部设备的用户的联系网络中的所述装置的用户的用户简档相关,并与所述发送的预定代码匹配;Receiving a connection establishment request from at least one listening external device through a receiver, the connection establishment request including an authentication key from a user of said listening external device, wherein said authentication key is associated with a contact network of the user of said listening external device correlating with the user profile of the user of said device in said device and matching said transmitted predetermined code; 验证所述连接建立请求的起源,并在优选无线电通信网络中向所述至少一个监听外部设备打开直接通信信道。Authenticating the origin of the connection establishment request and opening a direct communication channel to the at least one listening external device in the preferred radio communication network. 30.一种存储有一组计算机可读指令的非瞬态计算机可读介质,当被至少一个处理器执行时,所述指令使得装置至少:30. A non-transitory computer readable medium storing a set of computer readable instructions that, when executed by at least one processor, cause an apparatus to at least: 通过局部无线电通信网络经由接收器扫描表示预定代码的无线电信号脉冲序列;Scanning a sequence of radio signal pulses representing a predetermined code via a receiver through a local radio communication network; 从至少一个发送外部设备接收表示识别所述发送外部设备的用户的所述预定代码的无线电信号脉冲序列;receiving from at least one transmitting external device a sequence of radio signal pulses representing said predetermined code identifying a user of said transmitting external device; 匹配在所述接收到的预定代码中编码的用户的身份与在所述装置中存储的在联系网络的用户简档中的联系人身份;matching the identity of the user encoded in said received predetermined code with the identity of a contact stored in said device in a user profile of a contact network; 取得与所述发送外部设备的所述用户相关的验证密钥,并利用所述验证密钥向所述发送外部设备发送连接建立请求;Obtaining an authentication key related to the user of the sending external device, and using the authentication key to send a connection establishment request to the sending external device; 从所述发送外部设备接收对所述连接建立请求的验证,并在优选通信网络中向所述发送外部设备打开直接通信信道。Validation of the connection establishment request is received from the sending external device and a direct communication channel is opened to the sending external device in the preferred communication network.
CN201480081440.2A 2014-08-28 2014-08-28 Method and apparatus for establishing private communication between devices Pending CN106576238A (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/FI2014/050657 WO2016030567A1 (en) 2014-08-28 2014-08-28 Method and apparatus for establishment of private communication between devices

Publications (1)

Publication Number Publication Date
CN106576238A true CN106576238A (en) 2017-04-19

Family

ID=55398790

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201480081440.2A Pending CN106576238A (en) 2014-08-28 2014-08-28 Method and apparatus for establishing private communication between devices

Country Status (4)

Country Link
US (1) US10425812B2 (en)
EP (1) EP3186988A4 (en)
CN (1) CN106576238A (en)
WO (1) WO2016030567A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112621738A (en) * 2019-10-08 2021-04-09 炬星科技(深圳)有限公司 Robot control method, electronic device, and computer-readable storage medium

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105706390B (en) * 2013-10-30 2020-03-03 三星电子株式会社 Method and apparatus for performing device-to-device communication in a wireless communication network
US10389756B2 (en) * 2015-06-09 2019-08-20 Intel Corporation System, apparatus and method for security interoperability path analysis in an internet of things (IOT) network
US11023929B2 (en) * 2017-09-05 2021-06-01 Paypal, Inc. System and method for tokenizing offers
US11182766B2 (en) * 2019-03-22 2021-11-23 Verizon Patent And Licensing Inc. Initiating a transaction based on a real-time kinematics assisted location of a device
CN112188434A (en) * 2020-09-21 2021-01-05 西安墨科通讯科技有限公司 OTA (over the air) upgrading method and system
US12210893B2 (en) * 2021-07-29 2025-01-28 Red Hat, Inc. Establishing process connections utilizing an intermediary broker

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090234910A1 (en) * 2008-03-14 2009-09-17 Industrial Technology Research Institute Method and apparatuses for network society associating
WO2010111510A2 (en) * 2009-03-26 2010-09-30 Motorola, Inc. Method and device for determining proximity of a social network service acquaintance
WO2012166115A1 (en) * 2011-05-31 2012-12-06 Research In Motion Limited System and method for authentication and key exchange for a mobile device via spectrally confined wireless communications

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8086842B2 (en) * 2006-04-21 2011-12-27 Microsoft Corporation Peer-to-peer contact exchange
US20090117883A1 (en) * 2006-07-20 2009-05-07 Dan Coffing Transaction system for business and social networking
US8346863B2 (en) * 2006-08-15 2013-01-01 International Business Machines Corporation Contact initialization based upon automatic profile sharing between computing devices
US20080182591A1 (en) 2006-12-13 2008-07-31 Synthesis Studios, Inc. Mobile Proximity-Based Notifications
EP2138964A1 (en) 2008-06-27 2009-12-30 THOMSON Licensing Social networking protocol for mobile social networks
KR100989082B1 (en) * 2008-08-07 2010-10-25 한국전자통신연구원 Security situation information exchange method between mobile terminals and device therefor
US8359643B2 (en) 2008-09-18 2013-01-22 Apple Inc. Group formation using anonymous broadcast information
US20110307380A1 (en) 2010-06-10 2011-12-15 Ido Lieberman System And Method For Establishing And Managing Social Wireless Network
US8447813B2 (en) 2010-07-26 2013-05-21 Scott Redmond Mobile multi-network communications device
US8880663B2 (en) * 2010-09-27 2014-11-04 Nokia Corporation Method and apparatus for sharing user information

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090234910A1 (en) * 2008-03-14 2009-09-17 Industrial Technology Research Institute Method and apparatuses for network society associating
WO2010111510A2 (en) * 2009-03-26 2010-09-30 Motorola, Inc. Method and device for determining proximity of a social network service acquaintance
WO2012166115A1 (en) * 2011-05-31 2012-12-06 Research In Motion Limited System and method for authentication and key exchange for a mobile device via spectrally confined wireless communications

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112621738A (en) * 2019-10-08 2021-04-09 炬星科技(深圳)有限公司 Robot control method, electronic device, and computer-readable storage medium

Also Published As

Publication number Publication date
EP3186988A4 (en) 2018-04-25
US10425812B2 (en) 2019-09-24
US20170272948A1 (en) 2017-09-21
WO2016030567A1 (en) 2016-03-03
EP3186988A1 (en) 2017-07-05

Similar Documents

Publication Publication Date Title
CN115699837B (en) Method and device for transmitting network access information between terminals in mobile communication system
EP3735787B1 (en) System and method for end-to-end secure communication in device-to-device communication networks
EP2901811B1 (en) Systems and methods for device-to-device communication in the absence of network coverage
US8151336B2 (en) Devices and methods for secure internet transactions
CN103259775B (en) Device association via video handshake
CN108259164B (en) Identity authentication method and equipment of Internet of things equipment
US10425812B2 (en) Method and apparatus for establishment of private communication between devices
CN109428717A (en) Managing, there is the universal embedded integrated circuit card of multiple certificate authority persons to deploy
CN104469765B (en) Terminal authentication method and device used in mobile communication system
WO2013071208A2 (en) Device association via video handshake
WO2015061566A1 (en) Peer based authentication
CN104798432A (en) Device to-device (D2D) discovery without authenticating through cloud
CN107371163A (en) A kind of method and apparatus for controlling access wireless network
CN106031120B (en) key management
JP2014509468A (en) Method and system for out-of-band delivery of wireless network credentials
CN104796894A (en) Configuration information transmission method and equipment
US20160261568A1 (en) Secure Distributed Device-to-Device Network
CN101637003A (en) System and method for authentication for wireless emergency services
CN104469766A (en) Terminal authentication method and device used in mobile communication system
CN103428263A (en) Information processing apparatus, network system and information processing method
Nguyen et al. An SDN‐based connectivity control system for Wi‐Fi devices
JP7717665B2 (en) Authentication system, connected car, and authentication method
KR20210147822A (en) Method and apparatus to transfer network access information between devices in mobile communication system
WO2025131286A1 (en) Controlling privacy of communication services through i/o user devices performing user terminal emulation as a cloud computing service
Nayak et al. An application for end to end secure messaging service on Android supported device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
WD01 Invention patent application deemed withdrawn after publication
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20170419